Tier-2 escalation point to identify, analyze and remediate security incidents for customers worldwide* Conducting cyber risk assessments, scanning, drills, and creating reports for customers* Establishing and maintaining technical documentation such as deployment procedures, troubleshooting guides and incident playbooks for SOC teams across Hong Kong, Beijing and Shanghai* Splunk platform design and implementation* Maintaining Splunk SIEM platform by performing daily system maintenance, troubleshooting, performing regular version upgrades* Developing security correlation rules based on MITRE ATT&CK Framework for different security devices including but not limited to Firewall, Endpoint, EDR, Active Directory, Linux Server* Assisted in ISO 27001 Audit for the SOC team

* Security Operation Center Tier 2 service* Service Delivery Owner for SOC customers* Manage and monitor service deliver under SLA* Conduct regular review meetings with customers* Consider upsell and renew opportunity* Product investigation (Study new product and security technology related to SOC service offer)